Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Master Service Agreement or other agreement for services between JTG Systems and its business clients.

1. Scope & Applicability

This DPA applies where JTG Systems processes personal data on behalf of a Controller (Client) in the course of providing IT or repair services, particularly where GDPR or UK GDPR applies.

2. Roles & Responsibilities

• Client (Controller): Responsible for ensuring a legal basis for processing and providing clear instructions to JTG Systems.
• JTG Systems (Processor): Processes data only on documented instructions from the Client and in accordance with this DPA.

3. Technical & Organizational Measures

JTG Systems implements appropriate measures to ensure a level of security appropriate to the risk, including encryption of personal data, maintaining confidentiality, and regular security testing.

4. Sub-processors

Client provides general authorization for JTG Systems to engage sub-processors (e.g., cloud providers). JTG Systems ensures that sub-processors are bound by data protection obligations as protective as those in this DPA.

5. Data Subject Rights

JTG Systems will assist the Client in responding to requests from individuals exercising their rights under applicable data protection laws.

6. Personal Data Breaches

JTG Systems will notify the Client without undue delay after becoming aware of a personal data breach affecting the Client's data.

7. Contact

For DPA-related inquiries, please contact privacy@jtgsystems.com.